CVE-2022-25832

Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication...

Authentication flaw

Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication...

CVE-2022-27839

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

CVE-2022-25833

The CVE-2022-25833 entry concerns Samsung SMR prior to Apr-2022 Release 1, where improper authentication in ImsService could allow an attacker to obtain IMSI without the READ_PRIVILEGED_PHONE_STATE permission. The vulnerability involves authentication checks in ImsService, enabling local access t...

CVE-2022-25832

Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication...

CVE-2022-25832

CVE-2022-25832 concerns an improper authentication vulnerability in the Samsung S Secure component prior to SMR Apr-2022 Release 1, enabling physical attackers to access the locked Myfiles app without authentication. Affected product/variant: S Secure with Myfiles lock mechanism prior to the spec...

CVE-2021-46740: Improper Authentication

The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality...

PT-2022-17560

Name of the Vulnerable Software and Affected Versions ImsService versions prior to SMR Apr-2022 Release 1 Description The issue is related to improper authentication in ImsService, allowing attackers to obtain the IMSI without the necessary READ PRIVILEGED PHONE STATE permission. Recommendations...

CVE-2022-27839: Improper Authentication

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

CVE-2021-43177: Undefined Security Weakness

As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password OTP for one and only one immediately trailing interval. CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N...

CVE-2022-25832: Improper Authentication

Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication...

PT-2022-18628

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 16.2.1 Description The issue is related to an improper authentication vulnerability in the SecretMode of Samsung Internet. This vulnerability allows attackers to access the bookmark tab without proper...

PT-2022-17559

Name of the Vulnerable Software and Affected Versions S Secure versions prior to SMR Apr-2022 Release 1 Description The issue allows physical attackers to use the locked Myfiles app without authentication due to an improper authentication vulnerability. Recommendations For versions prior to SMR...

CVE-2022-25833: Improper Authentication

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

MGASA-2022-0134 Updated 389-ds-base packages fix security vulnerability

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The...

SAP Information System 1.0.0 Missing Authorization

Exploit Title: SAP Information System 1.0.0 - Improper Authentication Date: 06/04/2022 CVE: CVE-2022-1248 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/15262/sap-information-system-using-phppdo-oop.html Version: 1.0.0 Tested on: Linux Title: ================ SAP...

PT-2022-2365

Name of the Vulnerable Software and Affected Versions FLMG-10 version 10.0.1.0H100SP22C00 Description The issue is related to an improper authentication mechanism in the software, which can be exploited to gain control of the victim device. Successful exploitation may allow an attacker to load...

CVE-2022-1248: Improper Authentication

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAPInformationSystem/controllers/addadmin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploi...

The vulnerability of the Dynamic Security plugin of the Mosquitto messaging broker allows a hacker to gain access to confidential data.

The vulnerability of the Dynamic Security plugin of the Mosquitto messaging broker is related to improper authentication. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

The vulnerability of Jetty servlet containers, related to improper authentication, allows attackers to gain access to confidential data.

The vulnerability of Jetty servlet containers is related to improper authentication. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...